Detection rules › By event

Microsoft-Windows-ProcessExitMonitor

EventRules
Event ID 30001

Event ID 3000

#